recursive unbound on ymir

1 files changed, 21 insertions, 0 deletions

diff --git a/ymir.nix b/ymir.nix
index e12ae138..991ac552 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -657,4 +657,25 @@ in rec {
       };
     };
   };
+
+  services.unbound = {
+    enable = true;
+    networks = ["127.0.0.0/8" "::ffff:127.0.0.0/104" "::1/128" "10.141.0.0/16"];
+    interfaces = ["127.0.0.1@5353" "::1@5353" "10.141.5.1@5353"];
+    extraConfig = ''
+      private-domain: "yggdrasil"
+    
+      domain-insecure: "10.in-addr.arpa"
+      domain-insecure: "yggdrasil"
+
+      local-zone: "10.in-addr.arpa" nodefault
+    
+      stub-zone:
+        name: "10.in-addr.arpa"
+        stub-addr: 10.141.1.1
+      stub-zone:
+        name: "yggdrasil"
+        stub-addr: 10.141.1.1
+    '';
+  };
 }